CVE-2007-1137 | BDVDB-2026-22553 Detail

Description#

putmail.py in Putmail before 1.4 does not detect when a user attempts to use TLS with a server that does not support it, which causes putmail.py to send the username and password in plaintext while the user believes encryption is in use, and allows remote attackers to obtain sensitive information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.vupen.com/english/advisories/2007/0753
https://exchange.xforce.ibmcloud.com/vulnerabilities/32689
http://www.securityfocus.com/bid/22718
http://putmail.sourceforge.net/home.html
http://secunia.com/advisories/24266
http://osvdb.org/33764

Exploit#

No public exploit known

History#

Version 12007-02-27Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.